Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.mft
File: mpGLgMuzJzekayRIaaatVQlUP6E.mft (raw, json)
Hash identifier: yTP+TzTEv/Ps5kKpGVi680TjXi98WrTitpgloL821EA=
Subject key identifier: F0:2D:39:03:BD:FB:24:FC:17:55:DC:36:D9:7B:99:C8:17:95:F2:6F
Authority key identifier: 9A:91:8B:80:CB:B3:27:37:A4:6B:24:48:69:A6:AD:55:09:54:3F:A1
Certificate issuer: /CN=9a918b80cbb32737a46b244869a6ad5509543fa1
Certificate serial: 0196A0F70A2C423652504A97A5E1F3906639
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpGLgMuzJzekayRIaaatVQlUP6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.mft
Manifest number: 08CC
Signing time: Mon 05 May 2025 15:01:06 +0000
Manifest this update: Mon 05 May 2025 15:01:06 +0000
Manifest next update: Tue 06 May 2025 15:01:06 +0000
Files and hashes: 1: _sJ1gEKp9zcUkmdoEUiL1Hgw__4.roa (hash: QNXdCikQmuLlbojTN81QhJiEfrR2COSucqfmF6ZaSHQ=)
2: mpGLgMuzJzekayRIaaatVQlUP6E.crl (hash: 1mRNsW5WgMozNOOuCzs/zI536SSNC0S1kugicQvv4Aw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/mpGLgMuzJzekayRIaaatVQlUP6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:f7:0a:2c:42:36:52:50:4a:97:a5:e1:f3:90:66:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a918b80cbb32737a46b244869a6ad5509543fa1
Validity
Not Before: May 5 15:01:06 2025 GMT
Not After : May 6 15:01:06 2025 GMT
Subject: CN=f02d3903bdfb24fc1755dc36d97b99c81795f26f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9c:73:b3:0c:9d:5e:7c:6b:ec:86:d2:2d:3a:
47:d4:79:85:dd:c5:59:91:5b:ed:ea:c1:20:e8:12:
ba:a4:e8:df:bb:14:40:9f:48:77:7a:1b:5e:e5:91:
b9:4b:09:1c:1e:96:5b:fd:ff:5b:95:0a:7f:44:ca:
8f:ea:b8:8c:07:ef:a5:ae:70:1e:4b:1e:28:da:0c:
87:fa:4a:97:e1:3d:cc:d3:ab:0b:01:69:72:f7:88:
20:3e:79:b6:23:ab:72:e8:dc:26:fa:85:5e:5f:61:
de:8e:86:cb:41:2b:80:1b:32:c6:a8:44:6a:4f:c2:
2c:02:5d:c2:dc:a1:24:3b:cb:56:04:37:7d:ff:f0:
9a:ab:99:f9:82:3c:09:6b:dc:69:bb:aa:94:d6:f5:
85:eb:53:36:19:fe:d4:9f:8e:d6:bd:b0:1e:3c:dc:
e8:0b:f0:55:94:c8:5b:d2:6e:1b:f3:cd:93:ae:a0:
48:a8:af:b3:10:2d:92:34:b1:e8:14:04:d5:5a:b6:
8b:26:94:80:2f:84:04:3c:2e:c8:50:4a:05:0f:99:
8a:7a:70:ef:83:66:31:50:df:c2:6d:ac:65:da:5c:
2d:c6:7b:fc:b1:18:0f:a7:f6:c3:44:ba:a7:bb:b5:
61:a6:7d:98:bf:5a:7e:15:15:89:ea:26:ae:fb:2b:
7a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:2D:39:03:BD:FB:24:FC:17:55:DC:36:D9:7B:99:C8:17:95:F2:6F
X509v3 Authority Key Identifier:
keyid:9A:91:8B:80:CB:B3:27:37:A4:6B:24:48:69:A6:AD:55:09:54:3F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpGLgMuzJzekayRIaaatVQlUP6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:ee:26:b0:87:68:d1:8c:6a:4f:14:bb:c2:3f:cb:25:b8:ad:
97:81:38:3c:3f:88:c6:72:80:c5:25:ea:07:81:60:ae:74:02:
6e:3f:24:44:23:58:84:db:69:19:5b:ea:51:ed:eb:bc:e7:2c:
93:af:c6:87:b4:2c:2c:34:88:38:f5:75:1d:c9:32:97:d4:b9:
92:da:cc:b8:d3:fe:e4:9c:cc:88:63:ca:0a:a8:16:e7:0d:ce:
85:e1:54:ed:3a:0b:c4:d4:f1:78:45:ad:6d:8b:b2:72:02:ba:
c8:67:75:c7:db:98:43:32:10:8c:4b:93:6a:97:5a:39:90:b6:
88:ac:6e:0c:ab:94:66:6b:26:ba:54:f6:37:23:2e:87:a3:1f:
79:d3:4b:a8:fb:6c:32:cf:bb:29:fc:e5:72:4a:18:10:44:3a:
1f:ca:0d:f7:e2:c6:ef:d4:26:8f:a7:b3:bc:1d:1a:c5:b9:9b:
9c:74:a6:b7:2d:f2:5e:59:38:92:de:ca:89:2d:c4:ee:34:fd:
a5:37:80:a6:ec:75:a2:b6:3a:83:df:a6:5c:15:96:d4:11:8f:
90:11:48:ea:e9:f7:c1:b6:37:a4:c8:0e:4c:7a:b8:c1:59:a7:
fa:6a:11:04:6a:09:f3:80:4c:1e:06:ce:cb:28:64:90:15:fa:
57:7f:fe:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 17:24:39 2025 by rpki-client